Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft
File:                     CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json)
Hash identifier:          hKCG4ciPXyV7c25GM41Ua/20NdsHGNvi0CZQym+X6cY=
Subject key identifier:   DE:89:4A:29:F8:F0:1C:4F:CA:79:6D:B2:67:C3:BB:BD:00:16:33:43
Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92
Certificate issuer:       /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592
Certificate serial:       2986D189ED616C1E56A6774A25D7897FDDCBFD49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft
Manifest number:          02B3
Signing time:             Fri 25 Apr 2025 16:41:09 +0000
Manifest this update:     Fri 25 Apr 2025 16:36:09 +0000
Manifest next update:     Mon 28 Apr 2025 23:47:09 +0000
Files and hashes:         1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=)
                          2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: W1+m8e8vQJprPI8P+qiVjFeEmGwdWkXJ5MtOQXlWVyw=)

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl
                          rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 23:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:86:d1:89:ed:61:6c:1e:56:a6:77:4a:25:d7:89:7f:dd:cb:fd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592
        Validity
            Not Before: Apr 25 16:36:09 2025 GMT
            Not After : Apr 28 23:47:09 2025 GMT
        Subject: CN=DE894A29F8F01C4FCA796DB267C3BBBD00163343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:80:e5:c7:b2:b0:be:ea:5d:35:bd:c4:8a:
                    2d:f4:79:1b:b2:c6:4e:d2:91:9d:6a:08:73:a4:0f:
                    8a:cb:dd:1a:89:90:08:bb:3a:de:4c:d0:51:b5:42:
                    db:1b:d7:9e:1c:0a:e3:b2:c0:d0:aa:8b:8a:54:7b:
                    9e:85:83:bc:8f:1d:7e:5f:e3:4a:49:8f:4d:35:23:
                    06:36:fa:6d:cf:a3:26:af:75:a9:e9:12:43:a1:f6:
                    fd:bb:4f:22:4a:e8:f5:97:af:e8:a8:d8:a9:1f:f8:
                    e6:00:f3:c5:cb:6b:6e:e9:20:fa:53:ed:7c:1a:69:
                    71:5d:57:a4:27:86:f6:9a:ba:9d:ac:1d:b8:09:93:
                    a9:0e:06:4a:db:98:51:a3:e5:f4:aa:27:7f:81:d0:
                    34:32:ef:87:04:b0:0e:51:de:2b:f9:07:91:ca:c6:
                    14:cc:b4:4e:52:11:64:1d:19:f7:30:d8:b8:27:9f:
                    55:b9:c5:17:85:4c:73:d3:76:c7:93:87:e0:0d:56:
                    4a:7c:94:c5:f4:5a:ac:85:40:29:f7:77:de:de:14:
                    19:9d:97:af:52:7b:74:0a:e9:84:fd:d4:5e:01:a7:
                    7a:e6:32:89:9e:07:60:e7:32:c8:d8:e7:f4:4c:69:
                    94:19:1c:31:2d:b8:75:f7:28:c2:a1:88:57:8c:ea:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:89:4A:29:F8:F0:1C:4F:CA:79:6D:B2:67:C3:BB:BD:00:16:33:43
            X509v3 Authority Key Identifier:
                keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:04:fb:53:c8:ec:47:a7:5e:e5:56:f4:d2:8a:6d:a3:8f:1e:
         6e:25:76:eb:79:b3:fb:23:50:33:58:59:17:52:b8:0a:5f:d6:
         39:7d:c3:28:c2:d6:13:2a:6e:3b:95:60:d1:8e:a5:b5:fe:4b:
         d2:65:70:b8:d4:ef:73:f4:9e:aa:13:6a:56:fb:34:33:6a:1d:
         7c:f5:aa:5e:72:06:34:39:bc:57:8e:5e:1c:cc:f1:41:6a:fb:
         8c:b2:cb:a8:38:85:ba:87:9c:48:e0:b3:dc:56:12:49:f1:d6:
         bd:48:49:e9:a1:c6:79:66:8e:9d:52:d4:bb:ab:2a:63:13:c1:
         1a:c0:9b:da:0d:84:bf:fd:ec:9b:51:2e:fb:cb:ea:82:2a:34:
         9a:01:e2:0b:b1:dc:de:68:9e:26:78:08:d4:8b:4a:eb:d1:ed:
         38:b2:9c:cd:7b:ef:86:6e:02:c1:1c:8b:9e:45:55:49:c1:f3:
         54:f3:0b:e3:83:7c:42:ca:e5:89:88:ad:69:88:a4:bd:2e:7a:
         97:7e:ab:5a:98:41:6c:59:29:5c:56:08:a8:5c:03:b0:88:34:
         e9:d3:14:7a:f8:c3:61:58:e4:ef:c8:fa:b2:b3:7d:1a:be:51:
         10:3b:ac:27:e3:cc:90:5d:30:71:e0:92:bd:59:fb:bd:59:93:
         df:80:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:23:50 2025 by rpki-client on console.sobornost.net